) 



-12- 
Claims 

1 1. A packet interception system for intercepting message packets transferred over a network, the 

2 packet interception system comprising: 

3 A. a processed packet store; and 

an intercepted packet processorconfigured to processacuiiently-interceptedmessage packet 
and a hash value generated for a previously-processed message packet in connection with a 
selected hash algorithm to generate ahash value for the currently-intsrcepted message packet 
thereby to generate a processed message packet and to store the processed message packet 
in the processed packet store. 



4 B. 

5 
6 
7 
8 



1 2. A packet interception system as defined in claim 1 in which one of said currently-intercepted 

2 message packet is a first intercepted message packet, the intercepted packet processor being 

3 configured to use a selected value along with the first intercepted message packet in generating the 

4 processed message packet therefor, 

1 3. A packet interception system as defined in claim 2 in which the selected value includes a session 

2 identifier value. 



1 4. A packet interception system as defined in claim 1 in which said intercepted packet processor is 

2 further configured to append to each currently-intercepted message packet a time stamp reflective 

3 of a time at which the currently-intercepted message packet is received, the time stamp fiirther being 

4 used in generating the hash value. 
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5. A packet interception system as defined in claim 1 in which said intercepted packet processor is 
further configured to generate, for selected processed message packets, respective digital signatures, 
and to store each digital signature in the processed packet store with the respective processed 
message packet for which it was generated. 



6. A packet interception system as defined in claim 1 further including an intercept system monitor 
configured to monitor at least one predetermined aspect of operation of said packet processor, the 
intercept system monitor communicating with said packet processor over a wireless communication 
link. 



7. A method of processing message packets intercepted over a network, the method comprising the 
steps of: 

A. an intercepted packet processing step in which a currently-intercepted message packet is 
processed in connection with a hash value generated for a previously-processed message 
packet using a selected hash algorithm to generate a hash value for the currently-intercepted 
message packet thereby to generate a processed message packet 

B. storing the processed message packet in a processed packet store. 



8. A method as defined in claim 7 in which one of said currently-intercepted message packet is a fu^t 
intercepted message packet, the intercepted packet processing step including a step of using a 
selected value along with the first intercepted message packet in generating the processed message 
packet therefor. 
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9. A method as defined in claim 8 in which the selected value includes a session identifier value. 

1 0. A method as defined in claim 7 in which said intercepted packet processing step includes the step 
of appending to each currently-intercepted message packet a time stamp reflective of a time at which 
the currently-intercepted message packet is received, the time stamp fiirther being used in generating 
the hash value. 

V 

/ 

1 1 . A method as defined in claim 7 in which said intercepted packet processing step includes the step 
of jgenerating, for selected processed message packets, respective digital signatures for storage in the 
processed packet store with the respective processed message packet for which it was generated. 

12. A packet verification system for verifying message packets intercepted over a network, the 
packet verification system comprising: 

A. a processed packet store configured to store a header and a series of processed message 
packets each processed message packet including a message packet and a hash value; and 

B. a packet verification processor configured to, in verification of a selected one of said 
processed message packets in said series, process successive processed message packets prior 
thereto in the series, for each processed message packet, as a current processed message 
packet, the packet verification processor being configured to process the message packet of 
the current processed message packet and a hash value associated with a hash value 
associated with a previous processed message packet in the series in connection with a 
selected hash algorithm thereby to generate a hash value for the message packet, compare 
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12 the generated hash value to the hash value associated with the current processed message 

13 packet and determine whether the message packet is verified based on the comparison. 

1 13. A packet verification system as defined in claim 12 in which one of said current processed 

2 message packet is a first intercepted message packet, the verification packet processor being 

3 configured to use a selected value along with the first processed message packet in generating the 

4 processed message packet therefor. 

1 1 4. A packet verification system as defined in claim 1 3 in which the selected value includes a session 

2 identifier value. 

1 1 5. A packet verification system as defined in claim 12 in which said verification packet processor 

2 is further configured to process, in coimection with each current processed message packet, a time 

3 stamp reflective of a time at which the current processed message packet was received, in connection 

4 with the hash algorithm. 

1 1 6. A packet verification system as defined in claim 1 2 in which said selected ones of said processed 

2 message packets further have respective digital signatures, the verification processor further being 

3 configured to verify the digital signature associated with each processed message packet to be 

4 processed thereby. 



1 
2 



1 7. A packet verification system as defined in claim 1 further including an intercept system monitor 
configured to monitor at least one predetermined aspect of operation of said packet verification 
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3 processor, the intercept system monitor communicating with said packet verification processor over 

4 a wireless communication link. 



1 18. A packet verification method for verifying message packets intercepted over a network and 

2 stored in a processed packet store configured to store a header and a series of processed message 

3 packets each processed message packet including a message packet and a hash value verification of 

4 a selected one of said processed message packets in said series, the method comprising the steps of 

5 iteratively, up to the selected one of said processed message packets: 

6 A. process, for a current one of said processed message packets, the message packet of the 

7 current processed message packet and a hash value associated with a hash value associated 

8 with a previous processed message packet in the series m connection with a selected hash 

9 algorithm to generate a hash value for the message packet; 

10 B. compare the generated hash value to the hash value associated with the current processed 

1 1 message packet; and 

1 2 C, determine whether the message packet is verified based on the comparison. 



1 19. A packet verification method as defined in claim 18 in which one of said current processed 

2 message packet is a first intercepted message packet, the processor processing step including the step 

3 of using a selected value along with the first processed message packet in generating the processed 

4 message packet therefor. 



1 20. A packet verification method as defined in claim 19 in which the selected value includes a 

2 session identifier value. 
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1 21, A packet verification method as dej5ned in claim 1 8 in which said processing step includes the 

2 step of processing, in connection with each current processed message packet, a time stamp 

3 reflective of a time at which the current processed message packet was received, in connection with 

4 the hash algorithm. 

1 22. A packet verification method as defined in claim 1 8 in which said selected ones of said processed 

2 message packets fiirther have respective digital signatures, the processing step fiirther including the 

3 step of verifying the digital signature associated with each processed message packet to be processed 

4 thereby. 

1 23. A packet interception system 

2 A. a packet interception device configured to intercept message packets transferred over a 

3 network, and 



4 

5 
6 



B. 



an intercept system monitor configured to monitor at least one predetermined aspect of 
operation of said packet interception device, the intercept system monitor communicating 
with said packet interception device over a wireless communication link. 



